> What kind of attack do you have in mind where someone can sniff on the data but not tamper with it?

Passive collection, where you search through the accumulated data after the fact.